Your idea deserves care. So does your data.

Echo is Kestforge’s AI project guide. It asks questions to understand the personal app, website, software or AI solution you have in mind. Echo cannot make contractual commitments. You can edit the summary and choose whether to send it. A person at Kestforge reviews the request before preparing a proposal. You can also use the form to request a quote or a call directly without sending the project to the AI model.

The Echo transcript stays in session memory and is not saved by our server. Sessions last at most 30 minutes; closing or refreshing the page ends the connection and clears the draft and chat from the browser. Only when you confirm submission do we save the approved summary, name, email, optional company, preferred times and notes for a video call if requested, request reference and submission confirmation. Contact details and appointment preferences from the separate form are not sent to the AI model.

We encrypt confirmed requests with AES-256-GCM before saving them, including any temporary files. The key is kept on our server, separate from the requests, and is never sent to the public website. Authorised staff can read the requests to prepare a proposal. The notification email contains only a reference and date, without your project or contact details.

On the public website, Echo requires an encrypted HTTPS/WSS connection and cannot start over HTTP. In the local preview, the browser connects to a service on the same device without TLS encryption. This exception is only for local development. Our server connects to the AI provider over HTTPS.

OpenAI processes the text you send and generates replies. Requests use store:false, which is not Zero Data Retention: provider systems may retain data for abuse monitoring for up to 30 days, subject to the exceptions in its documentation. API content is not used for training by default. The ALTCHA security check is computed locally in your browser and verified by our backend without an external service. If Cloudflare Turnstile is configured, verification uses that service instead. The email service processes internal notifications, containing only the reference and date, and consultant-approved quotes, including the recipient, subject and proposal text.

Our server and the AI provider need to process messages. We therefore do not describe the conversation as end-to-end encrypted or promise that no authorised operator can access data. Start by describing your need in general terms. Do not share passwords, API keys, payment details, particularly sensitive information or confidential documents in chat. For confidential material, we agree on a suitable channel and sharing terms first.

New confirmed requests in the Echo archive expire after 90 days and are deleted by the service when they expire. There is no local transcript archive. Contractual documents or information later transferred to other work tools require separate handling. To request access, correction or deletion of your request, email the address below and include your reference if available.

We record aggregate counts by page and day without analytics cookies, IP addresses or visitor identifiers. Reports and technical AI usage are retained for up to one year; operational events for up to 180 days. Authorised administrators can manage status, internal notes and appointments: these records are encrypted and deleted with the request. The dashboard uses a necessary session cookie for administrator access.

RadioFast connects directly to the broadcaster’s servers only when you press Play. The TV loads its external player when you choose to turn it on. Broadcasters receive the technical connection data, including your IP address. The radio stores the chosen station, volume and favourites on your device, with no listening history. You can turn it off at any time; playback stops when you leave the office.

Project conversations and summaries never enter InOffice’s public meetings. Characters, on-screen code and meetings represent simulated activities. Chat with the characters, when enabled, is also processed by the AI provider: use it to explore the studio without sharing confidential information.

Legal notices and contact.